>> TAG: #0day

Motorola Device Manager 2.5.4 – ‘ForwardDaemon.exe ‘ Unquoted Service Path

Genexis Platinum-4410 P4410-V2-1.28 – Broken Access Control and CSRF

KMSpico 17.1.0.0 – ‘Service KMSELDI’ Unquoted Service Path

MEMU PLAY 3.7.0 – ‘MEmusvc’ Unquoted Service Path

CMSUno 1.6.2 – ‘lang’ Remote Code Execution (Authenticated)

SmartBlog 2.0.1 – ‘id_post’ Blind SQL injection

Sentrifugo 3.2 – ‘assets’ Remote Code Execution (Authenticated)

Sentrifugo Version 3.2 – ‘announcements’ Remote Code Execution (Authenticated)

BlogEngine 3.3.8 – ‘Content’ Stored XSS

iDS6 DSSPro Digital Signage System 6.2 – Cross-Site Request Forgery (CSRF)